Microsoft Windows Server 2019 vulnerabilities

3,499 known vulnerabilities affecting microsoft/windows_server_2019.

Total CVEs
3,499
CISA KEV
124
actively exploited
Public exploits
70
Exploited in wild
111
Severity breakdown
CRITICAL104HIGH2454MEDIUM928LOW13

Vulnerabilities

Page 127 of 175
CVE-2022-22002MEDIUMCVSS 5.5≥ 10.0.17763.0, < 10.0.17763.25652022-02-09
CVE-2022-22002 [MEDIUM] CVE-2022-22002: Windows User Account Profile Picture Denial of Service Vulnerability Windows User Account Profile Picture Denial of Service Vulnerability
nvd
CVE-2022-21998MEDIUMCVSS 5.5≥ 10.0.17763.0, < 10.0.17763.25652022-02-09
CVE-2022-21998 [MEDIUM] CVE-2022-21998: Windows Common Log File System Driver Information Disclosure Vulnerability Windows Common Log File System Driver Information Disclosure Vulnerability
nvd
CVE-2022-22710MEDIUMCVSS 5.5≥ 10.0.17763.0, < 10.0.17763.25652022-02-09
CVE-2022-22710 [MEDIUM] CVE-2022-22710: Windows Common Log File System Driver Denial of Service Vulnerability Windows Common Log File System Driver Denial of Service Vulnerability
nvd
CVE-2022-22712MEDIUMCVSS 5.6≥ 10.0.17763.0, < 10.0.17763.25652022-02-09
CVE-2022-22712 [MEDIUM] Windows Hyper-V Denial of Service Vulnerability Windows Hyper-V Denial of Service Vulnerability Windows Hyper-V Denial of Service Vulnerability
cvelistv5
CVE-2022-21985MEDIUMCVSS 5.5≥ 10.0.17763.0, < 10.0.17763.25652022-02-09
CVE-2022-21985 [MEDIUM] CVE-2022-21985: Windows Remote Access Connection Manager Information Disclosure Vulnerability Windows Remote Access Connection Manager Information Disclosure Vulnerability
nvd
CVE-2022-21849CRITICALCVSS 9.8≥ 10.0.17763.0, < 10.0.17763.24522022-01-11
CVE-2022-21849 [CRITICAL] CVE-2022-21849: Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
nvd
CVE-2022-21874CRITICALCVSS 9.8Exploited≥ 10.0.17763.0, < 10.0.17763.24522022-01-11
CVE-2022-21874 [CRITICAL] CVE-2022-21874: Windows Security Center API Remote Code Execution Vulnerability Windows Security Center API Remote Code Execution Vulnerability
nvd
CVE-2022-21898CRITICALCVSS 9.8Exploited≥ 10.0.17763.0, < 10.0.17763.24522022-01-11
CVE-2022-21898 [CRITICAL] CVE-2022-21898: DirectX Graphics Kernel Remote Code Execution Vulnerability DirectX Graphics Kernel Remote Code Execution Vulnerability
nvd
CVE-2022-21907CRITICALCVSS 9.8PoC≥ 10.0.17763.0, < 10.0.17763.24522022-01-11
CVE-2022-21907 [CRITICAL] CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability HTTP Protocol Stack Remote Code Execution Vulnerability
nvd
CVE-2022-21916HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.24522022-01-11
CVE-2022-21916 [HIGH] CVE-2022-21916: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-21859HIGHCVSS 7.0≥ 10.0.17763.0, < 10.0.17763.24522022-01-11
CVE-2022-21859 [HIGH] CVE-2022-21859: Windows Accounts Control Elevation of Privilege Vulnerability Windows Accounts Control Elevation of Privilege Vulnerability
nvd
CVE-2022-21864HIGHCVSS 7.0≥ 10.0.17763.0, < 10.0.17763.24522022-01-11
CVE-2022-21864 [HIGH] CVE-2022-21864: Windows UI Immersive Server API Elevation of Privilege Vulnerability Windows UI Immersive Server API Elevation of Privilege Vulnerability
nvd
CVE-2022-21861HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.24522022-01-11
CVE-2022-21861 [HIGH] CVE-2022-21861: Task Flow Data Engine Elevation of Privilege Vulnerability Task Flow Data Engine Elevation of Privilege Vulnerability
nvd
CVE-2022-21895HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.24522022-01-11
CVE-2022-21895 [HIGH] CWE-59 CVE-2022-21895: Windows User Profile Service Elevation of Privilege Vulnerability Windows User Profile Service Elevation of Privilege Vulnerability
nvd
CVE-2022-21897HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.24522022-01-11
CVE-2022-21897 [HIGH] CVE-2022-21897: Windows Common Log File System Driver Elevation of Privilege Vulnerability Windows Common Log File System Driver Elevation of Privilege Vulnerability
nvd
CVE-2022-21920HIGHCVSS 8.8≥ 10.0.17763.0, < 10.0.17763.24522022-01-11
CVE-2022-21920 [HIGH] CVE-2022-21920: Windows Kerberos Elevation of Privilege Vulnerability Windows Kerberos Elevation of Privilege Vulnerability
nvd
CVE-2022-21901HIGHCVSS 8.0≥ 10.0.17763.0, < 10.0.17763.24522022-01-11
CVE-2022-21901 [HIGH] CVE-2022-21901: Windows Hyper-V Elevation of Privilege Vulnerability Windows Hyper-V Elevation of Privilege Vulnerability
nvd
CVE-2022-21860HIGHCVSS 7.0≥ 10.0.17763.0, < 10.0.17763.24522022-01-11
CVE-2022-21860 [HIGH] CVE-2022-21860: Windows AppContracts API Server Elevation of Privilege Vulnerability Windows AppContracts API Server Elevation of Privilege Vulnerability
nvd
CVE-2022-21873HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.24522022-01-11
CVE-2022-21873 [HIGH] CVE-2022-21873: Tile Data Repository Elevation of Privilege Vulnerability Tile Data Repository Elevation of Privilege Vulnerability
nvd
CVE-2022-21881HIGHCVSS 7.8≥ 10.0.17763.0, < 10.0.17763.24522022-01-11
CVE-2022-21881 [HIGH] CWE-362 CVE-2022-21881: Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Elevation of Privilege Vulnerability
nvd